From 46777d05103a1f3b81d14f3f94a5e15e7df98cf9 Mon Sep 17 00:00:00 2001
From: Lukasz Raczylo <lukasz@raczylo.com>
Date: Tue, 19 May 2026 13:14:16 +0100
Subject: [PATCH] fix(lib): also route X-Auth-Request-Redirect through
 originalRequestURI helper

---
 middleware.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/middleware.go b/middleware.go
index 083b637..500366b 100644
--- a/middleware.go
+++ b/middleware.go
@@ -513,7 +513,7 @@ func (t *TraefikOidc) processAuthorizedRequest(rw http.ResponseWriter, req *http
 
 	// When minimalHeaders is enabled, skip extra headers to prevent 431 errors
 	if !t.minimalHeaders {
-		req.Header.Set("X-Auth-Request-Redirect", req.URL.RequestURI())
+		req.Header.Set("X-Auth-Request-Redirect", t.originalRequestURI(req))
 		req.Header.Set("X-Auth-Request-User", userIdentifier)
 		if idToken != "" {
 			req.Header.Set("X-Auth-Request-Token", idToken)